From 683ec2dc770c174ddc2c1f684de07667d3a77435 Mon Sep 17 00:00:00 2001
From: Mauro Carvalho Chehab <mchehab@redhat.com>
Date: Wed, 30 Jun 2010 17:24:28 -0300
Subject: [PATCH] --- yaml --- r: 201949 b: refs/heads/master c:
 ccfb30288228aaaf40a849bffe434bc9eb46b23c h: refs/heads/master i:   201947:
 f6ae245abad259f68b4f3ab936e63e7fcb0826db v: v3

---
 [refs]                                      | 2 +-
 trunk/drivers/staging/tm6000/tm6000-video.c | 4 ++--
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/[refs] b/[refs]
index 5782d21cd724..520f7971d710 100644
--- a/[refs]
+++ b/[refs]
@@ -1,2 +1,2 @@
 ---
-refs/heads/master: 758bb0b3e77d7876b76e48b4ac20f473be004421
+refs/heads/master: ccfb30288228aaaf40a849bffe434bc9eb46b23c
diff --git a/trunk/drivers/staging/tm6000/tm6000-video.c b/trunk/drivers/staging/tm6000/tm6000-video.c
index fd36b36407c5..ce0a089a0771 100644
--- a/trunk/drivers/staging/tm6000/tm6000-video.c
+++ b/trunk/drivers/staging/tm6000/tm6000-video.c
@@ -314,7 +314,7 @@ static int copy_streams(u8 *data, unsigned long len,
 				break;
 			}
 		}
-		if (cpysize < size) {
+		if (ptr + pktsize > endp) {
 			/* End of URB packet, but cmd processing is not
 			 * complete. Preserve the state for a next packet
 			 */
@@ -322,7 +322,7 @@ static int copy_streams(u8 *data, unsigned long len,
 			dev->isoc_ctl.size = size - cpysize;
 			dev->isoc_ctl.cmd = cmd;
 			dev->isoc_ctl.pktsize = pktsize - (endp - ptr);
-			ptr += cpysize;
+			ptr += endp - ptr;
 		} else {
 			dev->isoc_ctl.cmd = 0;
 			ptr += pktsize;